Data Protection & Privacy Company Information

1. Company Information

The following information identifies the legal entity responsible for the INRENDA platform and provides the principal contact details relevant to data protection and privacy matters.

2. Business Description

INRENDA TECHNOLOGIES LIMITED operates the INRENDA digital platform, which is designed to connect customers with service providers through a technology-enabled marketplace.

The current INRENDA platform is intended to facilitate access to local transportation and dispatch services, including:

• Ride booking services.
• Dispatch services.
• Courier and delivery services.

The platform may facilitate interactions between customers and service providers, including service requests, provider matching, communication, location-related functionality, service management, ratings and reviews, payment-related processing and operational support.

INRENDA may introduce additional services or features in the future. Where new services materially change the categories or purposes of personal-data processing, relevant privacy documentation will be reviewed and updated.

3. Purpose of This Document

This document provides a central record of key company information relevant to INRENDA's data protection and privacy compliance programme.

It identifies:

1. The legal entity responsible for the INRENDA platform.
2. The INRENDA product, platform and website.
3. The company's privacy contact information.
4. The nature of the services provided by INRENDA.
5. The principal categories of personal data that may be processed.
6. The categories of individuals whose information may be processed.
7. The technology systems that may support INRENDA's processing activities.
8. The areas of personal-data processing that will be documented in subsequent compliance records.

This document forms part of INRENDA TECHNOLOGIES LIMITED's internal data protection and privacy documentation.

4. Personal Data Handled by INRENDA

Depending on the services, features and interactions involved, INRENDA may process personal information relating to customers, service providers, riders or drivers, employees, contractors, administrators and other individuals who interact with the platform.

4.1 Identity Information

• Name.
• Profile information.
• Provider verification information.
• Identification documents where required for verification.

4.2 Contact Information

• Telephone number.
• Email address.
• Other contact information voluntarily provided by the individual.

4.3 Account Information

• Username or account identifiers.
• Login-related information.
• Account status.
• User preferences.

4.4 Location Information

Depending on the feature being used and permissions granted by the user, INRENDA may process location-related information.

This may include:

• Pickup location.
• Drop-off location.
• Service location.
• Provider or rider location where location functionality is enabled.
• Location information associated with service requests.

4.5 Transaction and Service Information

• Service requests.
• Orders and service records.
• Agreed prices.
• Service status.
• Provider and customer information relating to a service.
• Ratings and reviews.
• Relevant payment and transaction records.

4.6 Communication Information

• Messages exchanged through INRENDA.
• Customer-support communications.
• Relevant call-related records where applicable.

4.7 Security and Technical Information

• IP address.
• Device information.
• Authentication information.
• Login records.
• Security logs.
• Audit logs.
• Error and diagnostic information.

The exact categories of personal data collected and the applicable purposes, legal bases, retention periods and recipients will be confirmed and documented in the INRENDA Personal Data Processing Register.

5. Data Subject Categories

Depending on the services and interactions involved, INRENDA may process information relating to the following categories of individuals:

• Customers.
• Service providers.
• Riders and drivers.
• Dispatch and courier providers.
• Website visitors.
• Customer-support users.
• Individuals contacting INRENDA.
• Employees.
• Contractors.
• Administrators and authorised personnel.
• Individuals whose information is provided in connection with a service.

The applicable category of data subject will depend on the individual's relationship with INRENDA and the particular service or feature being used.

6. Privacy Responsibility

INRENDA TECHNOLOGIES LIMITED maintains internal responsibility for coordinating its data protection and privacy compliance activities.

Privacy and data protection activities may include:

• Maintaining privacy documentation.
• Coordinating applicable data protection requests.
• Supporting privacy and security incident management.
• Maintaining relevant compliance records.
• Reviewing data-processing activities.
• Working with appropriate external data protection professionals where necessary.

INRENDA may appoint or designate a formal Data Protection Officer (DPO), where required or considered appropriate under applicable data protection requirements.

7. Privacy Contact

Individuals who have questions, concerns or requests relating to privacy or personal data may contact INRENDA using the following details:

Privacy contact details will be reviewed periodically and updated when the company establishes a dedicated privacy or customer-support contact channel.

8. Information Systems

INRENDA's technology environment may include the following systems, services and infrastructure:

• INRENDA mobile application.
• INRENDA website.
• Laravel-based backend and API.
• Database systems.
• Administrative dashboard.
• Cloud and server infrastructure.
• File and document storage.
• Mapping and location services.
• SMS and OTP services.
• Email services.
• Push notification services.
• Communication systems.
• Analytics and monitoring systems.
• Backup systems.

Specific technology vendors, service providers and data processors will be documented separately in the INRENDA Third-Party Processor Register.

9. Data Protection Documentation

INRENDA TECHNOLOGIES LIMITED maintains a data protection documentation programme covering, as applicable:

1. Personal Data Processing Register

   A record of relevant personal-data processing activities, including purposes, categories of personal data, data subjects, recipients and retention considerations.

2. Privacy Policy

   Public-facing information explaining how INRENDA processes personal data.

3. Data Retention and Deletion Policy

   Internal requirements governing how long relevant personal data is retained and when it may be deleted or securely disposed of.

4. Data Subject Rights Procedure

   Procedures for receiving, assessing and responding to applicable personal-data requests.

5. Data Breach Response Procedure

   Procedures for identifying, containing, assessing, documenting and responding to personal-data incidents.

6. Data Protection Impact Assessments

   Assessments undertaken where processing activities may create significant privacy or data protection risks.

7. Third-Party / Data Processor Register

   Records of relevant external service providers and processors involved in INRENDA's processing activities.

8. Information Security Controls

   Technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

9. Privacy Governance and DPO Documentation

   Documentation relating to privacy responsibilities, governance arrangements and any formally appointed Data Protection Officer.

10. NDPC Registration and Compliance Records

    Records relating to INRENDA's applicable data protection registration and compliance activities.

10. Document Control

11. Approval

This document is maintained as part of the internal data protection and privacy compliance records of:

This document should be reviewed and updated when material changes occur to the company's operations, technology environment, personal-data processing activities or applicable data protection requirements.